There was also a bug related to positioning requests for emergency services that crashed android phones:

"core Android Telephony Framework GPS race condition from the early days of Android (roughly 2011–2014)."

My AI was unable to find any existing webpages for this though?

Also there was this:

https://community.oneplus.com/thread/579700

This has very little in common with Stagefright. Most importantly: Stagefright was vulnerable to arbitrary media being sent in arbitrary apps.

This requires carrier to cooperate.